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- T/?e MAILING DATE of this communication appears on the cover sheet with the correspondence address- 
All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1.313 and MPEP 1308. 

1 . ^ This communication is responsive to the paper filed on August 6. 2004 . 

2. ^ The allowed claim(s) is/are 1-18.20-36 and 38 . 

3. ^ The drawings filed on 5/7/2001 are accepted by the Examiner. 

4. □ Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (0. 

a) □ All b) □ Some* c) □ None of the: 

1. □ Certified copies of the priority documents have been received. 

2. □ Certified copies of the priority documents have been received in Application No. . 

3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 

Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements 
noted below. Failure to timely comply will result in ABANDONMENT of this application. 
THIS THREE-MONTH PERIOD IS NOT EXTENDABLE. 

5. □ A SUBSTITUTE OATH OR DECLARATION must be submitted. Note the attached EXAMINER'S AMENDMENT or NOTICE OF 

INFORMAL PATENT APPLICATION (PTO-152) which gives reason(s) why the oath or declaration is deficient. 

6. □ CORRECTED DRAWINGS ( as "replacement sheets") must be submitted. 

(a) □ including changes required by the Notice of Draftsperson's Patent Drawing Review ( PTO-948) attached 

1) □ hereto or 2) □ to Paper No./Mail Date . 

(b) □ including changes required by the attached Examiner's Amendment / Comment or in the Office action of 

Paper NoVMail Date . 

Identifying indicia such as the application number (see 37 CFR 1.84(c)) should be written on the drawings in the front (not the back) of 
each sheet. Replacement sheet(s) should be labeled as such in the header according to 37 CFR 1.121(d). 
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attached Examiner's comment regarding REQUIREMENT FOR THE DEPOSIT OF BIOLOGICAL MATERIAL. 
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Art Unit: 3621 

DETAILED ACTION 

Status 

Claims 1-18, 20-36 and 38 remain pending, 

Response to Arguments 

1 . The Applicant's arguments filed on December 3 1 , 2003 have been fully considered. 

As per claims 1-18, 20-36 and 38 the Examiner finds that limitations of amended claims 
1-18, 20-36 and 38 are not disclosed in any prior art references. 

Allowable Subject Matter 

Claims 1-18, 20-36 and 38 are allowed over the prior art record. 

1 . The following is an Examiner's statement of reasons for allowance: 

2. The closest prior art of record Coueignoux (US Patent 6,092,197) teaches a method for 
secure discovery and exploitation of publication information. Achieving electronic privacy 
(Chaum) teaches a method cryptographic signatures. Park (KR 2001092805) teaches a method 
for transmitting personal information using a data line. 

What they fail to teach or suggest: 

A. a method for promoting compliance with data protection and privacy laws and 
regulations relating to the privacy rights of individuals that comprises: obtaining the individual's 
consent to have the entity receive, or acknowledgment that the entity will receive, and use his/her 
personal data in accordance with a stated policy or with relevant data protection and privacy laws 
and regulations covering the use of personal data in at least the individual's or the entity's country 
of location; transmitting to the entity data indicating that the individual has been informed of the 
entity's privacy practices and consented to the entity receiving, or acknowledged that the entity 
will be receiving, and using his/her personal data in accordance with its stated policy or with 
relevant data protection and privacy laws and regulations covering the use of personal data in at 
least the individual's or the entity's country of location; receiving from the entity data comprising 
personal data collected by the entity from the individual; storing said personal data received from 
the entity; periodically checking whether the entity has complied with the stated policy or with 
relevant data protection and privacy laws and regulations covering the use of personal data in at 
least the individual's or the entity's country of location and wherein the steps of informing the 
individual obtaining the individual's consent or acknowledgment transmitting data to the entity 
and receiving data from the entity are performed over a computer network. 

This distinct feature renders claim 1 allowable. 
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Claims 2-18, and 20 are dependant upon claim 1 and have all of the limitations of claim 1 
and are allowable for the same reasons. 



B. A system for promoting compliance with data protection and privacy laws and 
regulations relating to the privacy rights of individuals that comprises: means for obtaining the 
individual's consent to have the entity receive, or acknowledgment that the entity will receive 
and use his/her personal data in accordance with a stated policy or with relevant data protection 
and privacy laws and regulations covering the use of personal data in at least the individual's or 
the entity's country of location', means for transmitting to the entity data indicating that the 
individual has been informed of the entity's privacy practices and consented to the entity 
receiving, or acknowledgment that the entity will be receiving, and using his/her personal data in 
accordance with its stated policy or with relevant data protection and privacy laws and 
regulations covering the use of personal data in at least the .individual's or the entity's country of 
location', means for receiving from the entity data comprising personal data collected by the 
entity from the individual; means for storing said personal data received from the entity; and 
means for periodically checking whether the entity has complied with the stated policy or with 
relevant data protection and privacy laws and regulations covering the use of personal data in at 
least the individual's or the entity's country of location', and wherein a computer network 
comprises the means for informing the individual. Obtaining the individual's consent or 
acknowledgement, transmitting data to the entity, and receiving data from the entity. 

This distinct feature renders claim 21 allowable. 

Claims 22-36, and 38 are dependant upon claim 21 and have all of the limitations of 
claim 21 and are allowable for the same reasons. 



Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to John M Winter whose telephone number is (703) 305-3971 . The 
examiner can normally be reached on M-F 8:30-6, 1st Fridays off. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, James P Trammell can be reached on (703)305-9768. The fax phone numbers for the 
organization where this application or proceeding is assigned are (703) 305-7687 for regular 
communications. 

Any inquiry of a general nature or relating to the status of this application or proceeding 
should be directed to the receptionist whose telephone number is (703) 308-1 1 13. 



JMW 

October 18, 2004 



